Mutual TLS

[timgent]

Would it be possible for drakov to use client certificates when it connects to the API?

[yakovkhalinsky]

@timgent haven't done much with client TLS certs, could you describe how the process would work?

[timgent]

2 options:

1. Allows the hooks to be able to add client certificate details to all requests, similar to how other auth stuff can be done (I currently have in my hooks some stuff to do an OAuth2 login, get an auth token, and use that as a header for future requests. The NodeJS Request library I think handles certs well:
   https://github.com/request/request#using-optionsagentoptions

2. Have it as part of the spec. I'm not quite sure how this would work, would still need to configure where it should get the certificate files from. Option 1 is definitely a quicker, easier fix

What do you think? I've not dug into your code base but could possibly take a look